Privacy policy

Privacy Policy — Nudie Rudie Lunch Box Pty Ltd

Last updated: 6th July 2026

This Privacy Policy describes how Nudie Rudie Lunch Box Pty Ltd (ABN 82 697 719 225) ("we", "us", "our") collects, uses, stores, and discloses your personal information when you visit or purchase from www.nudierudielunchbox.com.au (the "Site").

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where applicable to our business, and we apply these standards as best practice across our operations regardless of any small business threshold.

1. Personal information we collect

Device and usage information

  • Examples: browser type/version, IP address, time zone, cookie data, pages/products viewed, search terms, referral source, on-site interactions.
  • Purpose: to operate the Site, secure it, and analyse usage to improve it.
  • Collected via: cookies, log files, pixels, and similar technologies.
  • Shared with: Shopify (platform host), Google Analytics, Meta, Google Ads (as set out in Section 5).

Order and account information

  • Examples: name, billing and shipping address, email, phone number, payment details (processed by our payment processor, not stored by us directly), order history, product/quiz preferences (e.g. colour, size, bundle recommendations from the Louie Lunch Box quiz).
  • Purpose: to fulfil orders, process payments, arrange shipping, provide confirmations/invoices, communicate with you, screen for fraud, and (where you've opted in) send you marketing communications.
  • Collected: directly from you.
  • Shared with: Shopify, our shipping/logistics providers (Starshipit, CouriersPlease, Australia Post), and Klaviyo (email marketing).

Customer support information

  • As above, plus any details you provide when contacting us.

Marketing communications

  • If you subscribe to our emails (via Klaviyo), we use your name and email address to send marketing content, which you may unsubscribe from at any time via the link in each email or by contacting us directly.
  • We do not currently send marketing SMS messages.

2. Minors

The Site is intended for use by adults making purchases on behalf of their families. We do not knowingly collect personal information directly from children. Where our content addresses children's nutrition, this is directed at parents/caregivers as the audience. If you are a parent or guardian and believe your child has provided us with personal information, contact us at the details below to request its deletion.

3. How we use personal information

We use personal information to: provide and improve our products and services; process and fulfil orders and payments; arrange shipping and provide order updates; provide customer support; communicate with you about your orders or enquiries; and, where you have opted in, provide marketing communications and targeted advertising.

4. Overseas disclosure of personal information

Some of our service providers store or process personal information outside Australia, including in the United States. This includes:

  • Shopify (e-commerce platform and payment processing)
  • Klaviyo (email marketing platform)
  • Meta (advertising)
  • Google (Google Analytics and Google Ads)

Before disclosing personal information to these overseas recipients, we take reasonable steps to ensure they handle it in a manner consistent with the Australian Privacy Principles, including relying on the providers' own compliance frameworks and contractual protections. You can read more about how each service handles your information via their respective privacy policies:

  • Shopify: https://www.shopify.com/legal/privacy
  • Google: https://policies.google.com/privacy
  • Meta: https://www.facebook.com/privacy/policy

5. Sharing personal information

We share personal information with:

  • Shopify, to power our online store and process payments.
  • Klaviyo, for email marketing (if you've opted in).
  • Starshipit, CouriersPlease, and Australia Post, to arrange and track delivery of your order.
  • Google (Analytics and Ads) and Meta, for site analytics and advertising, as described below.
  • Regulators, law enforcement, or other parties where required by law, or to protect our legal rights.

We do not sell your personal information to third parties.

6. Behavioural advertising and cookies

We use Google Analytics, Google Ads, and Meta advertising tools to understand Site usage and deliver relevant advertising.

  • Google Analytics: https://policies.google.com/privacy | opt-out: https://tools.google.com/dlpage/gaoptout
  • Meta/Facebook ad preferences: https://www.facebook.com/settings/?tab=ads
  • Digital Advertising Alliance opt-out: http://optout.aboutads.info/
  • Network Advertising Initiative: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

Cookies we use

Store functionality (required for the Site and checkout to work): _ab, _secure_session_id, cart, cart_sig, cart_ts, checkout_token, secret, secure_customer_sig, storefront_digest, _shopify_u.

Analytics and marketing: _tracking_consent, _landing_page, _orig_referrer, _s, _shopify_fs, _shopify_s, _shopify_sa_p, _shopify_sa_t, _shopify_y, _y.

Cookies persist between 30 minutes and two years depending on type. You can manage or block cookies through your browser settings, though this may affect Site functionality. We do not alter our data practices in response to browser "Do Not Track" signals, as there is no consistent industry standard for how to interpret them.

7. Data retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to meet our legal, accounting, and tax reporting obligations (generally at least 7 years for financial records under Australian tax law), after which it is securely deleted or de-identified.

8. Data security

We take reasonable technical and organisational steps to protect personal information from misuse, loss, and unauthorised access, including relying on the security measures of our service providers (Shopify, Klaviyo, etc.). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data breach notification

If we become aware of a data breach involving personal information that is likely to result in serious harm, we will assess and, where required, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals in accordance with the Notifiable Data Breaches scheme.

10. Your rights — access and correction

You have the right to request access to the personal information we hold about you, and to request correction if it is inaccurate, out of date, or incomplete. To make a request, contact us using the details below. We will respond within a reasonable timeframe.

11. Complaints

If you have concerns about how we've handled your personal information, contact us first at the email below. If you're not satisfied with our response, you may lodge a complaint with the OAIC: https://www.oaic.gov.au

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We'll update the "Last updated" date above when we do.

13. Contact us

Nudie Rudie Lunch Box Pty Ltd Email: hello@nudierudielunchbox.com.au

Last updated 6th July 2026